CYBER AND DIGITAL SECURITY 


1. We confirm our joint commitment to promoting an international stability 
framework for cyberspace based on the application of international law, 
agreed voluntary norms of responsible state behaviour, and confidence 
building measures, supported by co-ordinated capacity building programmes. 
We reaffirm that the UN Charter applies in its entirety to state actions in 
cyberspace. The law of state responsibility applies to cyber operations in 
peacetime, including the availability of the doctrine of countermeasures in 
response to international wrongful acts. 

2. We recognise that an increasing number of states are developing operational 
cyber capabilities. We emphasise their obligation to ensure their use is 
governed in accordance with international law. This does not encourage 
aggression, or contradict our common commitment to maintaining a peaceful 
cyberspace environment, rather, it fosters the understanding that, just like in 
the physical domains, states’ activities in cyberspace do not occur in a vacuum 
- states have rights - but they also have obligations. 

3. To this end, we will; 

• Engage in a new annual policy strategic dialogue on cyber threats, 
bringing together Government and Agencies; 

• Continue to offer our cyber reserves and expertise to help build resilience 
within NATO, and commit to joint action on building a role for NATO in 
improving the cyber defence capability of Allies and Partners; 

• Develop a new bilateral cooperation framework for engagement with 
Private Sector critical infrastructure owners to implement resilient cyber 
security solutions for their products and services, focusing particularly on 
companies in which we have a shared interest; 

• Identify cross-sector CNI interdependencies and our most critical assets, 
systems, and networks as well as current and potential forums for 
collaboration on the security and resilience of such assets, including a 
bilateral exchange on risk and resilience; 

• Support a variety of approaches, such as security by design, risk 
management practices, market-relevant security assessment for consumer 
Internet of Things products and associated services, including by seeking 
alignment on recommendations and sharing best practices; 

• Work together to raise the cost of malicious cyher activity by criminals 
and state actors, including through promoting the use of the EU Cyber 
Tool box and coordinated messaging; and 


Explore closer collaboration on Open Source and Open Source 
Intelligence to inform domestic and international policy, including 
sanctions, cyber, and hybrid threats, such as disinformation and 
propaganda. 



